Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/6532f703-3694-3957-9e5b-d2c1c0162b4e.roa
File:                     6532f703-3694-3957-9e5b-d2c1c0162b4e.roa (raw, json)
Hash identifier:          aAWKZ5tlDAtkofwD6Kx3ryaJCHov0/bQRRKbzQRJ3KY=
Subject key identifier:   39:8E:77:4D:66:F9:0C:AD:06:57:4A:0B:C7:8D:ED:B1:46:04:34:86
Certificate issuer:       /CN=8b56caea-2136-4342-baff-6f31268d4cc4
Certificate serial:       010D0C9F43285847C77EB86670005C4439DDDC80
Authority key identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/6532f703-3694-3957-9e5b-d2c1c0162b4e.roa
Signing time:             Tue 05 Nov 2024 14:21:08 +0000
ROA not before:           Tue 05 Nov 2024 14:21:08 +0000
ROA not after:            Mon 03 Feb 2025 14:21:08 +0000
asID:                     47536
IP address blocks:        140.235.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c7:7e:b8:66:70:00:5c:44:39:dd:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b56caea-2136-4342-baff-6f31268d4cc4
        Validity
            Not Before: Nov  5 14:21:08 2024 GMT
            Not After : Feb  3 14:21:08 2025 GMT
        Subject: CN=c566d1e0-eac6-4f74-8358-99b56f8afd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:15:2a:e4:60:80:65:b3:68:f0:be:c5:fb:08:
                    9f:57:17:56:f7:69:6e:46:99:96:bb:6f:2c:bf:0a:
                    2c:d1:77:9c:62:5f:5f:8d:ab:ea:57:fa:3d:3e:db:
                    00:14:37:ee:f0:a2:3a:af:05:9d:10:72:61:0f:1e:
                    8a:73:8c:4e:6e:1f:f1:e4:68:6a:61:de:45:75:38:
                    a4:03:91:68:53:53:11:8b:34:0d:22:04:ec:26:f2:
                    1a:3b:83:f5:de:2c:55:51:46:b8:55:bb:d6:86:b3:
                    59:f0:ee:ed:26:1c:51:af:85:21:50:12:52:16:c3:
                    a5:28:af:96:90:d7:86:3f:ae:7d:f3:b3:16:31:7d:
                    28:d5:4d:4e:4e:ca:d7:e6:a4:1c:60:d2:f0:a1:55:
                    3e:b5:d5:b3:bc:0c:0c:fc:78:53:96:2f:a3:e7:c0:
                    c2:9a:d3:6c:6f:dd:3e:71:3d:f2:ba:c5:66:2d:91:
                    77:e2:46:f9:23:9a:e1:81:0f:ac:84:5d:34:f5:a8:
                    ac:80:11:90:64:b5:5a:bf:d9:5c:b7:98:fa:f0:26:
                    72:41:1d:58:31:e7:1b:51:58:9c:8d:6c:af:d9:b4:
                    7b:bb:5b:04:b7:46:2e:51:6b:07:e6:28:a2:c1:5b:
                    fb:dd:31:49:da:12:b8:88:7c:af:b0:b0:16:9e:b8:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8E:77:4D:66:F9:0C:AD:06:57:4A:0B:C7:8D:ED:B1:46:04:34:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/6532f703-3694-3957-9e5b-d2c1c0162b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl

            X509v3 Authority Key Identifier:
                keyid:5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:de:51:f0:05:e8:f5:b4:b6:de:d3:0e:77:29:a3:dd:92:ec:
         f4:30:2f:11:40:aa:4b:26:cc:4f:11:f1:ea:9f:31:3b:df:17:
         e7:b9:98:d3:6b:85:ce:2e:f9:6f:f3:9a:3d:c5:49:03:2c:0b:
         77:5f:bf:10:cc:10:c4:cf:4e:28:f9:97:75:c0:41:c4:72:75:
         04:e6:91:2a:11:e8:5c:fd:bc:34:82:61:dc:a0:40:47:02:86:
         c1:7a:ec:a0:65:0e:ad:d9:ca:5a:88:88:a9:23:44:a4:55:c7:
         5c:e1:ec:df:38:cb:78:48:b0:1a:46:2b:5d:d5:2b:ce:d7:4a:
         33:11:b3:4a:43:65:1a:6d:e8:68:90:1d:0c:53:d6:b5:ae:2b:
         cb:a9:99:d5:82:a6:d9:ef:fb:c9:66:ed:34:e6:de:ea:6e:65:
         31:20:44:2d:d9:30:50:d6:9c:e5:50:64:e7:42:2e:d8:07:e9:
         9d:ea:04:20:7f:49:53:fd:a1:8d:72:c6:1c:bb:2e:11:60:28:
         97:4f:35:c5:6a:9a:b6:be:1b:07:98:0b:eb:8a:ba:20:30:88:
         33:c6:8c:1a:bf:6b:f5:90:27:58:5b:15:cc:88:51:11:b5:f8:
         f7:f4:f7:40:54:8f:47:96:4e:de:60:02:c8:db:61:c5:dc:8d:
         5f:6c:d4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:22:20 2024 by rpki-client on console-ams.rpki-client.org